Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa
File:                     34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa (raw, json)
Hash identifier:          y/8BRqAaFQuOd1hHfKDkNa8zh4lge8+s4X2vwi6NisM=
Subject key identifier:   66:D9:97:83:37:46:5E:FB:30:8D:E5:E7:09:6F:D3:D4:DE:CC:E5:AD
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       73F325438FEEB066805226247DAD6F8D1C3DABED
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa
Signing time:             Fri 30 Jan 2026 15:21:30 +0000
ROA not before:           Fri 30 Jan 2026 15:16:30 +0000
ROA not after:            Fri 29 Jan 2027 15:21:30 +0000
asID:                     268959
IP address blocks:        45.176.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:25:43:8f:ee:b0:66:80:52:26:24:7d:ad:6f:8d:1c:3d:ab:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Jan 30 15:16:30 2026 GMT
            Not After : Jan 29 15:21:30 2027 GMT
        Subject: CN=66D9978337465EFB308DE5E7096FD3D4DECCE5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:92:89:83:4f:04:db:4b:e2:77:dc:b6:7f:
                    f0:8a:a8:6d:8c:0a:81:6d:64:d7:95:65:2a:bf:25:
                    a5:85:74:ce:0a:a9:e0:e0:bd:3e:78:76:b3:27:f2:
                    3d:31:0e:b3:77:9a:95:2c:42:1d:2b:42:05:28:52:
                    86:f4:00:f7:e0:42:a7:18:4f:f5:ec:14:ae:fd:3d:
                    c0:f6:59:c8:28:1f:2c:9e:ce:0c:53:d6:6a:ad:4c:
                    b3:1a:bd:2f:c0:3e:4c:2b:71:6b:4f:fe:03:93:d4:
                    5e:92:c8:d9:6b:80:c7:2a:1c:49:29:89:7c:fe:3a:
                    bf:6d:02:1d:ca:6d:12:2e:d9:0c:6c:b6:42:65:d7:
                    ca:b7:d3:e7:c9:be:76:75:68:ac:6b:22:02:b0:f0:
                    9d:a8:88:c7:65:ec:a6:30:07:fb:94:cc:05:0e:57:
                    2b:e8:3e:87:26:0d:80:8a:91:7a:3a:bc:30:51:1a:
                    55:46:0d:d4:6a:fb:c7:e0:c3:ca:b9:e7:75:b7:a5:
                    0f:64:b5:c8:3e:64:6f:01:1b:40:e2:fb:55:7e:2b:
                    32:e8:0a:ae:ea:f1:79:81:fe:0b:12:92:f5:11:17:
                    54:df:39:3a:58:4a:d5:a5:04:05:a1:22:87:8a:df:
                    02:79:1d:e4:95:24:69:0c:ac:c9:88:e9:a6:73:07:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D9:97:83:37:46:5E:FB:30:8D:E5:E7:09:6F:D3:D4:DE:CC:E5:AD
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:dc:d1:65:d4:27:48:7b:aa:98:f3:e0:97:c9:34:cd:77:
         62:d7:8d:0d:e3:d0:8e:bd:ca:9d:5e:6f:32:e8:05:ae:de:f5:
         ad:6c:cc:0b:f7:a6:6e:ab:56:0f:98:5e:e5:fd:68:1a:d1:9f:
         b9:16:44:19:c6:09:2f:0e:13:9a:d6:c9:74:c2:05:c6:e6:19:
         28:8e:7f:7a:6b:14:ba:5d:83:cf:68:b8:34:70:50:0d:79:55:
         ec:c4:e3:7f:13:4c:41:2d:70:45:c3:4f:16:f2:0c:c9:3d:a8:
         d4:0d:22:00:5f:f5:a6:8e:4a:e4:52:4b:29:54:50:11:c2:33:
         7e:7b:b1:03:60:af:14:bd:9e:bd:8f:e2:18:fc:bf:34:7d:79:
         52:94:b6:6e:23:6e:9c:49:9b:18:7f:56:19:c4:8e:10:89:ce:
         00:23:06:53:19:bd:cb:4c:8a:46:1e:9c:b5:3e:85:2f:94:3b:
         36:3e:93:f5:76:71:20:03:ad:20:0e:c5:95:8d:ad:ac:1d:a0:
         08:cd:82:fe:e0:65:8a:61:d7:ce:31:82:ae:5f:b6:2a:d2:6b:
         dd:ef:ce:c0:80:fe:da:a6:68:96:fd:54:f4:29:0d:34:f9:75:
         ef:71:72:e7:9a:79:c7:3b:d5:f7:92:c8:6c:7f:84:d4:d2:fe:
         9c:6f:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:13:37 2026 by rpki-client